This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json) Hash identifier: wCCIsOSQIwGqiPUduR7hCCbN+6JBspVOiBXOLvXHrYs= Subject key identifier: D6:EE:FC:5E:8B:09:64:DE:22:48:8D:E6:D7:B6:A1:41:49:12:DA:15 Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Certificate serial: 019B7F168DFA11FA65179309A745C3046B85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft Manifest number: 0ACD Signing time: Fri 02 Jan 2026 14:22:23 +0000 Manifest this update: Fri 02 Jan 2026 14:22:23 +0000 Manifest next update: Sat 03 Jan 2026 14:22:23 +0000 Files and hashes: 1: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (hash: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0=) 2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: lcBu0pVuaCRrivdxAWFNNj5HkSHqeeMZ03P76kT72qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:8d:fa:11:fa:65:17:93:09:a7:45:c3:04:6b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Validity Not Before: Jan 2 14:22:23 2026 GMT Not After : Jan 3 14:22:23 2026 GMT Subject: CN=d6eefc5e8b0964de22488de6d7b6a1414912da15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:97:ab:5d:f5:19:49:5d:52:23:0a:10:c2:ce: 8a:e3:37:21:c9:48:bb:d1:e2:d5:e4:0e:b3:c5:25: 27:b4:a4:55:3a:30:01:fa:fc:f0:50:06:a6:6d:60: a4:f0:95:df:a7:e0:83:b3:95:51:38:a4:7a:1d:20: b5:3c:71:67:76:3a:5b:eb:ed:88:35:2c:7d:78:a8: 75:02:b7:e9:23:54:be:90:3b:99:cc:1a:39:ec:0d: c1:0a:ff:f5:da:63:85:c0:8c:df:1a:ea:33:39:b4: ff:3d:36:0d:cd:90:2e:0d:81:33:ba:62:ef:61:e4: d8:42:71:45:27:2f:88:d2:8e:0d:d0:76:7c:3d:81: a1:72:b9:83:c6:68:58:9b:cb:6c:67:db:04:9b:6e: 43:45:1c:62:0d:f7:b2:95:e0:24:fe:10:6c:24:22: 0e:ff:28:0a:19:8f:57:c5:cc:9a:9b:7b:db:1c:57: 15:e8:3f:b8:e6:80:c4:44:63:38:cc:a5:95:da:78: 0c:77:0c:3b:c3:7c:d3:34:2a:10:42:2d:64:1f:f9: a7:f2:9d:4c:be:7b:45:f6:ec:74:1d:33:61:93:8a: ba:cd:76:a1:fa:e3:ff:f2:57:35:81:78:02:33:c9: 61:59:64:e4:39:b4:5a:30:73:b4:37:e2:30:32:b1: 68:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EE:FC:5E:8B:09:64:DE:22:48:8D:E6:D7:B6:A1:41:49:12:DA:15 X509v3 Authority Key Identifier: keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d3:56:a0:c8:54:99:2d:e9:cc:db:35:06:79:38:ef:4a:8f: c5:00:13:a1:7a:fb:cd:8a:6a:f5:09:d2:2d:c4:41:db:00:3e: 21:48:2f:c6:16:d5:ba:6c:2e:65:ac:61:65:1f:19:d5:79:09: e2:5f:d9:3d:05:97:15:ef:1f:32:a2:ef:52:cf:06:fb:2b:d9: 98:d7:80:d7:27:80:9d:db:f4:a0:af:5f:cf:bf:db:81:dc:30: da:66:36:b5:2d:77:1a:6c:72:6c:31:53:60:2e:cb:4a:66:ab: 5c:c6:7f:3e:fe:f4:f4:72:0f:4f:66:a9:be:03:00:0c:c9:59: fc:f0:75:5f:0b:b3:58:bd:39:4b:ba:ec:8d:01:59:7e:a7:de: 15:93:ae:90:1d:ff:a2:9e:d0:a7:9f:74:4b:30:60:ba:82:c7: cf:53:27:02:fd:cc:b1:a9:db:b1:53:32:04:81:2a:69:46:a3: 6a:98:95:65:cf:dc:15:b6:c2:ce:a4:8d:36:fc:07:22:f1:20: 31:5a:66:a8:fa:ba:c1:77:f1:63:3c:d7:f7:ce:49:c2:90:76: f5:57:c8:fa:10:00:f4:ec:80:db:42:c1:67:5f:2a:4f:44:36: a0:a4:f6:39:c7:91:67:e1:4e:cb:d6:a2:75:30:1f:24:26:ac: 40:64:db:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/Fo36EfplF5MJp0XDBGuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3 N2Q0ZDEwHhcNMjYwMTAyMTQyMjIzWhcNMjYwMTAzMTQyMjIzWjAzMTEwLwYDVQQD EyhkNmVlZmM1ZThiMDk2NGRlMjI0ODhkZTZkN2I2YTE0MTQ5MTJkYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZerXfUZSV1SIwoQws6K4zchyUi7 0eLV5A6zxSUntKRVOjAB+vzwUAambWCk8JXfp+CDs5VROKR6HSC1PHFndjpb6+2I NSx9eKh1ArfpI1S+kDuZzBo57A3BCv/12mOFwIzfGuozObT/PTYNzZAuDYEzumLv YeTYQnFFJy+I0o4N0HZ8PYGhcrmDxmhYm8tsZ9sEm25DRRxiDfeyleAk/hBsJCIO /ygKGY9Xxcyam3vbHFcV6D+45oDERGM4zKWV2ngMdww7w3zTNCoQQi1kH/mn8p1M vntF9ux0HTNhk4q6zXah+uP/8lc1gXgCM8lhWWTkObRaMHO0N+IwMrFoSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbu/F6LCWTeIkiN5te2oUFJEtoVMB8GA1UdIwQY MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2 LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdNWoMhU mS3pzNs1Bnk470qPxQAToXr7zYpq9QnSLcRB2wA+IUgvxhbVumwuZaxhZR8Z1XkJ 4l/ZPQWXFe8fMqLvUs8G+yvZmNeA1yeAndv0oK9fz7/bgdww2mY2tS13GmxybDFT YC7LSmarXMZ/Pv709HIPT2apvgMADMlZ/PB1XwuzWL05S7rsjQFZfqfeFZOukB3/ op7Qp590SzBguoLHz1MnAv3MsanbsVMyBIEqaUajapiVZc/cFbbCzqSNNvwHIvEg MVpmqPq6wXfxYzzX985JwpB29VfI+hAA9OyA20LBZ18qT0Q2oKT2OceRZ+FOy9ai dTAfJCasQGTbpg== -----END CERTIFICATE-----Generated at Fri Jan 2 17:09:22 2026 by rpki-client